tslsp
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill involves the use of the @0xdeafcafe/tslsp-cli Node.js package, which is a resource owned by the skill's author.
- Evidence: The skill instructs the agent to run npm i -g @0xdeafcafe/tslsp-cli or use npx --no-install @0xdeafcafe/tslsp-cli.
- [COMMAND_EXECUTION]: The skill functions by executing various subcommands of the tslsp-cli tool through npx to perform tasks like symbol searching, renaming, and type checking.
- Evidence: Multiple command patterns such as npx --no-install @0xdeafcafe/tslsp-cli find-symbol and npx --no-install @0xdeafcafe/tslsp-cli rename are provided.
- [PERSISTENCE]: The skill includes functionality to append configuration blocks to CLAUDE.md and AGENTS.md files to influence future agent tool selection.
- Evidence: Commands like npx --no-install @0xdeafcafe/tslsp-cli install --skills --with-claude-md are used to persist routing instructions for the agent.
Audit Metadata